Public Report

// audit details
Public report

Espresso Systems

decentralized-rollup-sequencer

code reviewdesign reviewformal verification
November 24, 2025EthereumCode Review Audit

Critical / High

1Highest severity

Medium

0Moderate risk

Low / Informative

12Lower severity

Report files

1Downloadable assets

Audit lifecycle

Public reports represent completed engagements with finalized deliverables.

Completed
1

Completed

Scheduled

Scope, timeline, and review plan were agreed.

2

Completed

In Progress

Manual review and verification work were carried out.

Current stage

Completed

The engagement wrapped with a published final report.

Executive Summary

High-level assessment and conclusions

A concise overview of the audit scope, core findings, and the key outcomes from the engagement.

Espresso Systems engaged Runtime Verification, Inc. to audit the staking component and smart contract code of the Espresso Network, reviewing the Solidity implementation and business logic for potential vulnerabilities.

Espresso is a decentralized sequencing infrastructure for Ethereum rollups, providing a shared Byzantine fault-tolerant confirmation layer via HotShot consensus. It enables sub-second transaction confirmations with verifiable finality through SNARK proofs on Ethereum L1. Rollups use namespaces to extract transactions from the shared ledger, with proofs of inclusion, and the network supports both ZK and optimistic rollups. An escape hatch allows rollups to switch to backup sequencers if consensus liveness is lost, ensuring fast, verifiable, and composable transaction ordering.

The three week audit, starting from November 5th to November 19th, included a walkthrough, manual Solidity review, and formal verification with Kontrol to check properties across symbolic state transitions.

Reports

Download the audit artifacts

Access the published PDF deliverables associated with this engagement.

1 file

PDF report 1

Espresso Systems.pdf

Download the published report for this engagement.

Download PDF